Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f138643-4773-3122-a73a-90c3df5a47d6.roa
File:                     9f138643-4773-3122-a73a-90c3df5a47d6.roa (raw, json)
Hash identifier:          3kuKreieCKHUMVuhNZ5pOCRgelz62UNonKJ7kfvM0y4=
Subject key identifier:   89:49:38:08:D4:C2:7C:44:F1:6C:48:A4:F5:3B:93:CC:CD:5C:E4:6A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584AD3A101F239C4A817BBE6F700
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f138643-4773-3122-a73a-90c3df5a47d6.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     203
IP address blocks:        130.174.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:01:f2:39:c4:a8:17:bb:e6:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=3605f7a9-5aeb-4002-98a9-a23324f709dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:92:0f:cd:2c:69:f0:13:b6:3b:d2:f6:47:
                    7f:bc:9e:44:a8:46:6d:30:5b:31:94:9f:95:d3:35:
                    cd:1e:0f:b1:e7:43:a4:18:bc:8b:43:46:d9:0a:63:
                    1f:e7:93:51:11:f0:a2:87:71:4f:02:10:e9:82:1d:
                    83:8c:2f:f8:33:20:c6:9d:4c:20:54:a1:c8:f0:3a:
                    58:07:55:50:c0:ca:c5:18:d6:1a:c0:36:fa:09:74:
                    9e:df:7a:a8:ef:08:18:46:18:9e:9a:e4:ed:39:c4:
                    fe:e7:c6:57:d9:73:36:44:c7:c3:ac:5c:21:bb:34:
                    34:2e:b8:ff:79:a5:18:47:c0:d7:53:b5:1c:87:32:
                    16:34:f7:18:b0:06:d5:7c:83:4d:02:a8:cf:c6:d1:
                    db:20:56:2f:95:34:0b:dd:87:cb:b0:3d:17:f3:5b:
                    70:65:c0:51:74:7c:6c:f7:25:4c:fe:70:38:0c:79:
                    40:d8:b5:61:0f:3d:11:44:28:90:cc:e8:40:3b:bb:
                    47:3b:0c:26:fb:01:cb:53:9e:17:12:77:6e:6e:ce:
                    f0:13:6b:df:4a:c0:23:13:e0:51:8c:2d:4f:50:41:
                    ca:64:61:94:3d:30:bf:56:d8:98:96:34:e2:32:91:
                    46:04:80:62:48:a8:d5:ce:8b:ea:5e:34:32:cc:84:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:49:38:08:D4:C2:7C:44:F1:6C:48:A4:F5:3B:93:CC:CD:5C:E4:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9f138643-4773-3122-a73a-90c3df5a47d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.174.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:56:1c:d1:b3:75:5b:e5:2f:1e:a6:9a:fc:7a:43:85:a0:
         12:c2:60:9c:c7:28:db:a4:20:da:03:cf:2f:9a:27:c8:b7:65:
         bb:8f:36:cc:c7:ae:88:b2:a5:3f:dd:69:ce:86:c0:80:45:7a:
         83:83:1e:03:3d:ee:76:dc:54:4f:6a:7b:01:3f:f6:10:60:10:
         55:48:60:09:27:12:54:32:73:60:85:51:91:01:48:69:fb:47:
         8e:8a:99:a8:3c:95:7a:a8:37:de:b9:4e:5c:96:2a:69:21:2e:
         22:a3:23:28:3e:7d:40:62:28:11:67:d5:14:08:6b:f4:08:fc:
         8e:04:ac:ea:6d:8a:02:69:3d:ff:38:35:c8:92:d8:10:05:8f:
         af:0c:f2:7a:ab:df:6f:2c:e8:14:d4:f8:17:a0:f9:20:fc:e7:
         c5:da:cf:00:e1:32:d0:69:fb:db:d3:fb:23:b6:ef:3f:c0:c0:
         63:09:46:88:bc:d6:54:75:44:97:0e:2c:b8:2c:61:cb:9a:5e:
         d1:5d:fb:07:a4:20:b3:ab:c6:c6:4f:a0:1b:0c:4e:ab:64:dc:
         ed:11:3b:f7:1e:49:82:3e:9f:1b:83:45:43:25:6c:e5:97:1f:
         cb:72:56:62:7e:cc:c0:2f:93:20:1e:76:a8:04:08:15:81:84:
         d7:fb:8d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:10:56 2025 by rpki-client